Changeset 11538 in genesis

Timestamp:

Oct 10, 2012, 7:46:03 PM (12 years ago)

Author:

rick

Message:

Magical concentrator 'trick'

Def concentrator: Route all traffic to VPN concentrator on the internet to
'secure' the sponsored internet connection from over active spam/virus
controller messages and actions.

Files:

• nodes/HybridHuub/wleiden.yaml (modified) (1 diff)
• tools/gformat.py (modified) (2 diffs)

nodes/HybridHuub/wleiden.yaml

@@ -20 +20 @@
 service_proxy_ileiden: True
 service_proxy_normal: True
+service_concentrator: True
 status    : "up"
 

tools/gformat.py

@@ -168 +168 @@
         'service_accesspoint' : True, 
         'service_incoming_rdr' : False, 
+        'service_concentrator' : False,
         'monitoring_group' : 'wleiden',
       }
@@ -728 +729 @@
   service_accesspoint="{{ service_accesspoint|yesorno }}"
   service_incoming_rdr="{{ service_incoming_rdr|yesorno }}"
+  service_concentrator="{{ service_concentrator|yesorno }}"
   #
 
-  {% if service_proxy_ileiden %}
+  {% if service_concentrator %}
+    pf_rules="/etc/pf.hybrid-with-concentrator.conf"
+    pf_flags="-D ext_if=$externalif -D ext_if_net=$externalif:network -D masterip=$masterip"
+    pf_flags="$pf_flags -D publicnat=80,443"
+  {% elif service_proxy_ileiden %}
     pf_rules="/etc/pf.hybrid.conf"
     pf_flags="-D ext_if=$externalif -D ext_if_net=$externalif:network -D masterip=$masterip"